How json file execution PowerShell as admin

Question

I have a problem with making custom task for Azure Devops: I need to run a PowerShell script with admin permissions when task.json calls PowerShell

"execution": {
    "PowerShell3": {
        "target": "$(currentDirectory)\\X.ps1",
        "workingDirectory": "$(currentDirectory)"
                   }
              }

In the above code, how can I define that PowerShell can be run with the access of the administrator?

halfer · Accepted Answer · 2023-07-02 20:41:46Z

1

how can I define that PowerShell can be run with the access of the administrator?

I am afraid there is no such feature to run the PowerShell with the access of the administrator.

That because that When you execute the build, all build tasks should run under your build service account such as NetworkService. If you run the PowerShell scripts in the extension task. It's not able to directly run the script as a different user.

Besides, the extension task will be installed on different Azure devops and executed with different agents, we could not set a fixed account as an administrator account to apply to all different agents. What`s more. If we could use the extension task to run the PowerShell as admin, then we can apply it to do many things that exceed the authority, such as changing the password and so on. Obviously this is unsafe.

edited Jul 2, 2023 at 20:41

halfer

20.2k20 gold badges110 silver badges207 bronze badges

answered Jul 9, 2020 at 2:31

Leo Liu

77.8k11 gold badges133 silver badges159 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Arm-m Over a year ago

I think there must be a way. For example: Task PowerShell, which we can tell it to run a PowerShell file with admin access.

Leo Liu Over a year ago

@Arm-m, Yes, we could run a powershell file with admin access, but that need we run the powershell in the local agent and make sure your build service account (which can be a local account, a domain account, or Local Service in a workgroup) also got admin permission.stackoverflow.com/questions/38458899/…. But, in your case, you call the powershell file in the extension, how could we set our build service account as admin in other machine? So, I am afraid there is no such feature, if you get the solution, you could share it here.

Leo Liu Over a year ago

@Arm-m, Any update for this issue? Have you resolved this issue? If not, would you please let me know the latest information about this issue?

Collectives™ on Stack Overflow

How json file execution PowerShell as admin

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related